Basics of Identity & Access Management
Lets understand Identity and Access management basic concepts using example of school.
Access Management : Access Management in Layman language simply means managing all the things a person can access. For example, suppose a school has a policy that children of age less than 10 years cannot got to school cafeteria. So, school management puts a system to stop a kid (under 10) going to Cafeteria building. This process is called access management.
Identity Management : To understand Identity management, let's first understand the term Identity itself. And identity is nothing but a real world entity say For a School an Identity can be a student, teacher, peon, librarian, principal etc and for a Bank it can be its employees, customers etc. So Identity Management is managing information about these identities. for example ,To make policy of access to school cafe work, school needs to know age of students. So, they need to store it somewhere and whenever a child wants to go to cafe, a guard can simply pull records and see if child is of suitable age or not.
In the subsequent chapters we will discuss in details on managing information of identities.
Access Provisioning : Access Provisioning means granting the required access, as time passes identity may need some more access as per his role. For example: as the child moves to upper classes then he/she may also need access to library and computer labs. So giving that access to identity is called Access Provisioning. Access can be requested manually (on need basis) or it can be given as birthright access.
BirthRight Access Provisioning : BirthRight Access Provisioning is the term used for granting the basic access when an identity joins a system. For example, a child who is joining school, needs access to classroom and washroom from the very first day of joining. So, school needs to ensure that the same accesses should be granted to the child on first day.
Access Management : Access Management in Layman language simply means managing all the things a person can access. For example, suppose a school has a policy that children of age less than 10 years cannot got to school cafeteria. So, school management puts a system to stop a kid (under 10) going to Cafeteria building. This process is called access management.
Identity Management : To understand Identity management, let's first understand the term Identity itself. And identity is nothing but a real world entity say For a School an Identity can be a student, teacher, peon, librarian, principal etc and for a Bank it can be its employees, customers etc. So Identity Management is managing information about these identities. for example ,To make policy of access to school cafe work, school needs to know age of students. So, they need to store it somewhere and whenever a child wants to go to cafe, a guard can simply pull records and see if child is of suitable age or not.
In the subsequent chapters we will discuss in details on managing information of identities.
Access Provisioning : Access Provisioning means granting the required access, as time passes identity may need some more access as per his role. For example: as the child moves to upper classes then he/she may also need access to library and computer labs. So giving that access to identity is called Access Provisioning. Access can be requested manually (on need basis) or it can be given as birthright access.
BirthRight Access Provisioning : BirthRight Access Provisioning is the term used for granting the basic access when an identity joins a system. For example, a child who is joining school, needs access to classroom and washroom from the very first day of joining. So, school needs to ensure that the same accesses should be granted to the child on first day.
Comments
Post a Comment